We want to serve our files from Amazon S3.
We are worried about cost DoS attacks (deliberately downloading files from Amazon many times, in order for us to pay a big bill to Amazon).
We don't have enough money to use AWS Shield Advanced now.
Question: Will serving S3 not directly but through CloudFront help to reduce possible cost attacks? How much (if any) does it help against cost attacks?